Google Professional Cloud Network Engineer Question 246
Single answerGoogle Cloud PlatformYour organization has a Google Cloud project with multiple VPC networks. You have configured a VPN gateway in a regional VPC network to connect to an on-premises data center. The on-premises network requires access to resources hosted in another VPC network located in a different region. How can you ensure that the on-premises network can dynamically learn routes to the resources in the other VPC network?
- A
Enable global dynamic routing for the VPC network with the VPN gateway.
- B
Create static routes in the on-premises network for the resources in the other VPC network.
- C
Configure dynamic peering between the two VPC networks.
- D
Enable regional dynamic routing for the VPC network with the VPN gateway.
Show answer and explanation
Correct answer: A
Explanation
To allow the on-premises network connected via a VPN gateway to dynamically learn routes to resources in another region, global dynamic routing must be enabled for the VPC network where the VPN gateway resides. This setting ensures that routes learned from the VPN gateway are shared across all regions in the VPC, facilitating access to resources in other regions.
- A. Correct.
Enabling global dynamic routing ensures that the routes learned via the VPN gateway are propagated across all regions within the VPC, allowing the on-premises network to access resources in another region.
- B. Incorrect.
Static routes require manual configuration and do not scale well. This approach would not dynamically propagate routes to the on-premises network.
- C. Incorrect.
Dynamic peering between VPC networks is not a valid configuration option. Peering does not support dynamic route exchange by itself.
- D. Incorrect.
Regional dynamic routing restricts route propagation to the same region, which would not allow the on-premises network to dynamically access resources in another region.